This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
File: pmnxwhNwxE39EOKvaIyMTg6hKVU.mft (raw, json)
Hash identifier: MTL/lgJP+KFaeGt7bpN2MMNc8/2Kiu7USZx15VQp2Nk=
Subject key identifier: 2E:F4:68:AE:C5:DC:89:76:8F:10:C8:87:1C:87:75:4C:B6:C0:DE:51
Authority key identifier: A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55
Certificate issuer: /CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955
Certificate serial: 019C4359143E79A4FE2CA87F59C9C9BB745D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
Manifest number: 1059
Signing time: Mon 09 Feb 2026 17:00:37 +0000
Manifest this update: Mon 09 Feb 2026 17:00:37 +0000
Manifest next update: Tue 10 Feb 2026 17:00:37 +0000
Files and hashes: 1: pmnxwhNwxE39EOKvaIyMTg6hKVU.crl (hash: dD1w9/DW3bgFZOHDHKEXnAo8I3ukhDscfC0qAcNac+I=)
2: xHv2_HdEJG5Cfvg9tYmqVThQtwc.roa (hash: Nxypi5IV+neWqZvzXksjBejqnOVHDrNcZpixogm0gqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:14:3e:79:a4:fe:2c:a8:7f:59:c9:c9:bb:74:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955
Validity
Not Before: Feb 9 17:00:37 2026 GMT
Not After : Feb 10 17:00:37 2026 GMT
Subject: CN=2ef468aec5dc89768f10c8871c87754cb6c0de51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:20:46:f3:d7:de:b4:a1:b1:ad:95:c0:c3:11:
5c:23:e4:4e:78:b7:d7:30:3f:03:94:fc:a3:c2:f4:
33:b9:22:1c:76:1b:f9:17:f5:2a:eb:77:82:35:80:
46:dc:82:7b:f4:d3:8c:ad:41:34:79:19:4e:f1:00:
06:5e:5b:ee:99:4b:ed:83:d4:2e:4f:86:96:a3:57:
e7:0c:fc:4a:04:9f:48:ad:5d:b4:11:0c:e3:66:de:
b5:cd:00:79:8f:2a:47:bb:c8:e8:94:75:1f:c2:6f:
6a:40:4c:a8:2a:eb:43:80:73:ef:7b:06:3b:c4:64:
11:04:14:1e:bc:7f:75:e3:17:b7:60:8d:74:68:91:
92:34:5c:54:9e:7e:ae:0d:ff:c1:0b:70:6a:7b:87:
4f:f7:3b:a8:3c:e5:04:3e:e0:ce:94:64:d1:85:8d:
2a:1c:a9:25:0b:af:e8:e5:31:a3:93:60:a6:2b:23:
92:51:47:ac:33:88:72:ec:28:a5:7d:fc:d5:4a:6b:
c3:02:f6:15:f5:08:7a:0f:58:09:8d:73:f6:23:17:
f2:51:31:43:77:f2:ac:65:1f:4e:06:fc:76:0e:15:
a7:0b:f8:8d:e3:40:09:c9:ff:61:63:71:29:f0:2e:
64:2d:80:b5:50:e6:a2:ae:5f:73:31:8b:60:da:ae:
6e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F4:68:AE:C5:DC:89:76:8F:10:C8:87:1C:87:75:4C:B6:C0:DE:51
X509v3 Authority Key Identifier:
keyid:A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:5a:50:2e:58:05:ab:e8:21:ba:04:87:63:c7:51:df:34:8b:
92:83:1c:79:8c:f4:cb:bb:14:a3:0f:a5:29:9a:eb:b9:ed:2b:
40:6a:aa:36:29:5d:21:a1:1e:1d:de:7a:c9:fd:86:62:b8:22:
d8:c2:cd:e4:40:a7:96:ce:47:fb:30:a1:39:1e:48:cc:e6:5d:
5e:7d:86:fe:70:a5:40:e1:5c:10:b1:e5:ac:3e:a4:66:01:2e:
26:bb:59:92:a1:be:fc:da:36:ca:9e:3b:82:ef:18:85:6a:3d:
cc:fa:9a:18:f3:ec:92:b3:fe:1d:ad:a4:49:d2:47:a5:9c:e3:
48:50:74:5c:c8:4b:4a:56:f2:7f:16:18:b0:b0:52:22:72:93:
fd:9f:46:ab:1c:7d:d1:8b:cd:29:06:5c:34:84:ae:9c:93:f1:
c1:14:24:f4:24:6a:0e:bf:4a:ef:12:51:fe:0a:b1:e5:51:b4:
da:0e:d8:ac:a2:8e:4f:5b:94:f3:19:00:1c:65:99:2d:aa:f6:
bd:52:35:04:2d:23:96:ad:e3:b1:1e:87:84:a8:d0:b0:fc:d5:
a2:80:68:d5:c6:0c:4f:87:83:7e:fb:5a:05:2b:e9:c3:89:fd:
bf:71:54:cf:a0:94:54:88:ea:9b:46:4c:cf:ef:cf:d2:f1:cc:
a5:49:ef:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:11 2026 by rpki-client